Bug 2299429 (CVE-2024-7012) - CVE-2024-7012 puppet-foreman: An authentication bypass vulnerability exists in Foreman
Summary: CVE-2024-7012 puppet-foreman: An authentication bypass vulnerability exists i...
Keywords:
Status: NEW
Alias: CVE-2024-7012
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
urgent
urgent
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-07-23 05:00 UTC by Avinash Hanwate
Modified: 2024-11-05 17:25 UTC (History)
11 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2024:6335 0 None None None 2024-09-04 14:45:31 UTC
Red Hat Product Errata RHSA-2024:6336 0 None None None 2024-09-04 14:48:28 UTC
Red Hat Product Errata RHSA-2024:6337 0 None None None 2024-09-04 14:48:22 UTC
Red Hat Product Errata RHSA-2024:8906 0 None None None 2024-11-05 17:25:03 UTC

Description Avinash Hanwate 2024-07-23 05:00:40 UTC 
An authentication bypass vulnerability exists in Foreman due to Pulpcore when deployed with Gunicorn versions earlier than 22.0. The issue arises from how Apache’s mod_proxy handles header as it fails to unset it properly due to restrictions on underscores in HTTP headers. This allow authentication through malformed header instead. This flaw affects all Katello/Satellite 6.10+ deployments using Pulpcore from version 4.0+ and could potentially allow unauthorized users to gain admin access.
Comment 3 errata-xmlrpc 2024-09-04 14:45:29 UTC 
This issue has been addressed in the following products:

  Red Hat Satellite 6.15 for RHEL 8

Via RHSA-2024:6335 https://access.redhat.com/errata/RHSA-2024:6335
Comment 4 errata-xmlrpc 2024-09-04 14:48:21 UTC 
This issue has been addressed in the following products:

  Red Hat Satellite 6.13 for RHEL 8

Via RHSA-2024:6337 https://access.redhat.com/errata/RHSA-2024:6337
Comment 5 errata-xmlrpc 2024-09-04 14:48:27 UTC 
This issue has been addressed in the following products:

  Red Hat Satellite 6.14 for RHEL 8

Via RHSA-2024:6336 https://access.redhat.com/errata/RHSA-2024:6336
Comment 6 errata-xmlrpc 2024-11-05 17:25:01 UTC 
This issue has been addressed in the following products:

  Red Hat Satellite 6.16 for RHEL 8
  Red Hat Satellite 6.16 for RHEL 9

Via RHSA-2024:8906 https://access.redhat.com/errata/RHSA-2024:8906
Note You need to log in before you can comment on or make changes to this bug.